feat: quick wins — global search, P360 actions, context panel, route guards

- Wire GlobalSearch component into app shell top bar (US-10)
- P360: Book Appointment button opens AppointmentForm (US-8)
- P360: Add Note button creates leadActivity via GraphQL (US-8)
- P360: Appointment rows clickable for edit (active statuses only) (US-8)
- P360: Display lead status badge (was fetched but not rendered) (US-8)
- Context panel: "View 360" link on linked patient → /patient/:id (US-6)
- Context panel: Display campaign info from lead.utmCampaign (US-6)
- Route guards: Admin-only routes wrapped in RequireAdmin (US-1, US-3)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/components/layout/app-shell.tsx

@@ -15,6 +15,7 @@ import { useAuth } from '@/providers/auth-provider';
 import { useData } from '@/providers/data-provider';
 import { useMaintShortcuts } from '@/hooks/use-maint-shortcuts';
 import { useNetworkStatus } from '@/hooks/use-network-status';
+import { GlobalSearch } from '@/components/shared/global-search';
 import { apiClient } from '@/lib/api-client';
 import { cx } from '@/utils/cx';
 
@@ -119,7 +120,9 @@ export const AppShell = ({ children }: AppShellProps) => {
                 <div className="flex flex-1 flex-col overflow-hidden">
                     {/* Persistent top bar — visible on all pages */}
                     {(hasAgentConfig || isAdmin) && (
-                        <div className="flex shrink-0 items-center justify-end gap-2 border-b border-secondary px-4 py-2">
+                        <div className="flex shrink-0 items-center gap-2 border-b border-secondary px-4 py-2">
+                            <GlobalSearch />
+                            <div className="ml-auto flex items-center gap-2">
                             {isAdmin && <NotificationBell />}
                             {hasAgentConfig && (
                                 <>
@@ -140,6 +143,7 @@ export const AppShell = ({ children }: AppShellProps) => {
                                     <AgentStatusToggle isRegistered={isRegistered} connectionStatus={connectionStatus} />
                                 </>
                             )}
+                            </div>
                         </div>
                     )}
                     <ResumeSetupBanner />